Tag Elements Beginning with F > <from> (configuration/firewall/family/bridge/filter/term)

Usage

<configuration>
    <firewall>
        <family>
            <bridge>
                <filter>
                    <term>
                        <from>
                            <interface-group>...</interface-group>
                            <interface-group-except>...</interface-group-except>
                            <ether-type>...</ether-type>
                            <ether-type-except>...</ether-type-except>
                            <vlan-ether-type>...</vlan-ether-type>
                            <vlan-ether-type-except>...</vlan-ether-type-except>
                            <destination-mac-address>...</destination-mac-address>
                            <source-mac-address>...</source-mac-address>
                            <forwarding-class>...</forwarding-class>
                            <forwarding-class-except>...</forwarding-class-except>
                            <loss-priority>...</loss-priority>
                            <loss-priority-except>...</loss-priority-except>
                            <learn-vlan-id>...</learn-vlan-id>
                            <learn-vlan-id-except>...</learn-vlan-id-except>
                            <learn-vlan-1p-priority>...</learn-vlan-1p-priority>
                            <learn-vlan-1p-priority-except>...</learn-vlan-1p-priority-except>
                            <user-vlan-id>...</user-vlan-id>
                            <user-vlan-id-except>...</user-vlan-id-except>
                            <user-vlan-1p-priority>...</user-vlan-1p-priority>
                            <user-vlan-1p-priority-except>...</user-vlan-1p-priority-except>
                            <traffic-type>...</traffic-type>
                            <traffic-type-except>...</traffic-type-except>
                            <ip-source-address>...</ip-source-address>
                            <ip-destination-address>...</ip-destination-address>
                            <ip-address>...</ip-address>
                            <ip-protocol>...</ip-protocol>
                            <ip-protocol-except>...</ip-protocol-except>
                            <dscp>...</dscp>
                            <dscp-except>...</dscp-except>
                            <ip-precedence>...</ip-precedence>
                            <ip-precedence-except>...</ip-precedence-except>
                            <source-port>...</source-port>
                            <source-port-except>...</source-port-except>
                            <destination-port>...</destination-port>
                            <destination-port-except>...</destination-port-except>
                            <port>...</port>
                            <port-except>...</port-except>
                            <tcp-flags>tcp-flags</tcp-flags>
                            <icmp-type>...</icmp-type>
                            <icmp-type-except>...</icmp-type-except>
                            <icmp-code>...</icmp-code>
                            <icmp-code-except>...</icmp-code-except>
                        </from>
                    </term>
                </filter>
            </bridge>
        </family>
    </firewall>
</configuration>

Description

Define match criteria.

Contents

<destination-mac-address>—Destination MAC address.

<destination-port>—Match TCP/UDP destination port.

<destination-port-except>—Do not match TCP/UDP destination port.

<dscp>—Match Differentiated Services (DiffServ) code point.

<dscp-except>—Do not match Differentiated Services (DiffServ) code point.

<ether-type>—Match Ethernet type.

<ether-type-except>—Do not match Ethernet type.

<forwarding-class>—Match forwarding class.

<forwarding-class-except>—Do not match forwarding class.

<icmp-code>—Match ICMP message code.

<icmp-code-except>—Do not match ICMP message code.

<icmp-type>—Match ICMP message type.

<icmp-type-except>—Do not match ICMP message type.

<interface-group>—Match interface group.

<interface-group-except>—Do not match interface group.

<ip-address>—Match IP source or destination address.

<ip-destination-address>—Match IP destination address.

<ip-precedence>—Match IP precedence value.

<ip-precedence-except>—Do not match IP precedence value.

<ip-protocol>—Match IP protocol type.

<ip-protocol-except>—Do not match IP protocol type.

<ip-source-address>—Match IP source address.

<learn-vlan-1p-priority>—Match Learned 802.1p VLAN Priority.

<learn-vlan-1p-priority-except>—Do not match Learned 802.1p VLAN Priority.

<learn-vlan-id>—Match Learnt VLAN ID.

<learn-vlan-id-except>—Do not match Learnt VLAN ID.

<loss-priority>—Match Loss Priority.

<loss-priority-except>—Do not match Loss Priority.

<port>—Match TCP/UDP source or destination port.

<port-except>—Do not match TCP/UDP source or destination port.

<source-mac-address>—Source MAC address.

<source-port>—Match TCP/UDP source port.

<source-port-except>—Do not match TCP/UDP source port.

<tcp-flags>—Match TCP flags.

<traffic-type>—Match Match traffic type.

<traffic-type-except>—Do not match Match traffic type.

<user-vlan-1p-priority>—Match User 802.1p VLAN Priority.

<user-vlan-1p-priority-except>—Do not match User 802.1p VLAN Priority.

<user-vlan-id>—Match User VLAN ID.

<user-vlan-id-except>—Do not match User VLAN ID.

<vlan-ether-type>—Match VLAN Ethernet type.

<vlan-ether-type-except>—Do not match VLAN Ethernet type.